Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-68jj-c942-f24v

Опубликовано: 27 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8

Описание

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.

EPSS

Процентиль: 13%
0.00225
Низкий

8 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 8
nvd
около 1 месяца назад

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.

EPSS

Процентиль: 13%
0.00225
Низкий

8 High

CVSS3

Дефекты

CWE-862